Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u4Y95JArvX-cNakHeI54quDgA6o.roa
File: u4Y95JArvX-cNakHeI54quDgA6o.roa (raw, json)
Hash identifier: EuXZDa88qSbCYAujqiOuwx3JM39Iwu4h8J3g579Unkg=
Subject key identifier: BB:86:3D:E4:90:2B:BD:7F:9C:35:A9:07:78:8E:78:AA:E0:E0:03:AA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01933A3FA6D0BDEDC00E7FD223B1F3089CB0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u4Y95JArvX-cNakHeI54quDgA6o.roa
Signing time: Sun 17 Nov 2024 13:11:10 +0000
ROA not before: Sun 17 Nov 2024 13:11:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.8.0/24 maxlen: 24
82.152.12.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.90.0/23 maxlen: 24
212.38.88.0/23 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:3f:a6:d0:bd:ed:c0:0e:7f:d2:23:b1:f3:08:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 17 13:11:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb863de4902bbd7f9c35a907788e78aae0e003aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:a1:e9:cb:c1:ee:73:ae:97:03:b3:cb:8c:
5f:18:19:ec:e9:0f:66:67:75:96:8e:98:ee:01:05:
f2:8f:bc:00:ef:37:a1:a5:2c:a5:93:02:7f:db:67:
78:61:e5:41:34:83:ca:49:f0:3d:1b:70:dd:05:92:
2b:a7:24:e2:0c:14:b6:0e:17:8c:ae:95:56:2c:0e:
0b:50:60:cb:15:ca:b9:61:fb:cd:97:60:9c:03:0d:
a1:b8:07:82:45:1b:50:fe:70:a0:36:56:63:34:e1:
1c:35:63:76:4d:07:85:85:6a:79:a9:98:64:bc:d1:
23:ff:60:e9:d8:ed:4e:0f:04:35:d8:7a:11:0c:73:
cd:8e:bf:8f:19:0a:73:0c:0e:75:0b:bc:1c:4f:90:
e2:30:09:bb:44:1d:06:da:9f:81:83:56:96:e9:23:
f5:f2:54:35:51:0b:69:c1:31:23:78:88:13:dc:92:
10:1c:29:61:0d:fe:b2:9d:9c:9e:be:44:fa:e6:93:
34:30:bc:97:2e:61:ca:3b:88:48:19:3e:d0:d4:1a:
bb:43:22:86:67:46:4e:a0:be:8a:a7:1f:48:d5:f7:
01:58:d5:19:7b:6f:a1:45:f0:a0:9b:c6:df:48:37:
ea:09:e9:02:0f:39:41:58:06:37:22:61:64:e4:74:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:3D:E4:90:2B:BD:7F:9C:35:A9:07:78:8E:78:AA:E0:E0:03:AA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u4Y95JArvX-cNakHeI54quDgA6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.8.0/24
82.152.12.0/24
82.152.176.0/23
82.153.136.0/22
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.167.0/24
89.213.172.0/22
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
185.49.126.0/23
194.105.80.0/20
212.38.88.0/23
213.210.52.0/22
213.218.211.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:f3:23:25:db:75:f9:54:c0:b7:cb:23:2a:d9:c0:f7:2f:6c:
cc:a8:27:48:bc:af:e6:28:fb:b6:d2:23:c8:43:2a:4c:d8:f1:
ed:b6:c2:96:e9:80:a9:4a:68:27:11:ac:38:b6:a7:40:28:b9:
6c:46:6b:67:dd:61:e6:b1:fc:42:db:74:db:6b:62:78:83:b5:
5e:9e:ef:fe:87:2c:44:17:1a:b2:af:7d:2d:55:f3:01:22:68:
dd:18:fe:0f:14:6f:c7:fe:9d:20:17:fc:5b:f6:be:38:0a:93:
56:8b:37:f0:8c:03:8b:28:1d:9d:74:1c:86:ff:58:de:ff:bb:
ea:6b:89:bc:ef:ad:b9:c7:52:0e:9b:52:e0:e6:92:17:9f:2e:
c5:56:e5:41:3b:29:a3:47:41:72:22:3f:40:55:f2:db:a6:97:
84:9b:22:1a:88:89:6b:1e:1f:f8:d9:47:6f:65:bf:12:1f:4e:
95:1d:c5:d8:a7:40:e8:09:fc:eb:0a:0e:ae:78:ca:40:ba:ff:
ad:d9:e7:c0:1b:6c:6c:7e:36:97:df:f5:c3:0f:a1:f0:83:72:
cf:b1:30:bf:c2:94:36:9d:4e:1c:bd:46:7a:f9:18:c7:94:ab:
06:eb:3a:0a:ea:56:1d:07:d9:a0:3d:64:38:32:fb:0b:97:7c:
5b:f0:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:10 2025 by rpki-client